CVE-2019-8379 — NULL Pointer Dereference in Advancecomp

CWE-476 — NULL Pointer DereferenceCWE-20 — Improper Input Validation10 documents8 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 51.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Advancemame AdvancecompDebian LinuxFedoraproject Fedora+3 more
Timeline
PublishedFeb 17
Latest updateOct 12

Description

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶Debianadvancemame/advancecomp< 2.1-2.1+3
▶Ubuntuadvancemame/advancecomp< 2.1-1ubuntu0.18.04.2+1

Also affects: Debian Linux 9.0, Fedora 35, Enterprise Linux 7.0

🔴Vulnerability Details

4
OSV
advancecomp vulnerabilities↗2022-10-12
▶
GHSA
GHSA-422q-rpjc-cfgp: An issue was discovered in AdvanceCOMP through 2↗2022-05-13
▶
OSV
CVE-2019-8379: An issue was discovered in AdvanceCOMP through 2↗2019-02-17
▶
CVEList
CVE-2019-8379: An issue was discovered in AdvanceCOMP through 2↗2019-02-17
▶

📋Vendor Advisories

3
Ubuntu
AdvanceCOMP vulnerabilities↗2022-10-12
▶
Red Hat
advancecomp: null pointer dereference in function be_uint32_read() in endianrw.h↗2019-02-16
▶
Debian
CVE-2019-8379: advancecomp - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference e...↗2019
▶

💬Community

2
Bugzilla
CVE-2019-8379 advancecomp: null pointer dereference in function be_uint32_read() in endianrw.h↗2019-05-10
▶
Bugzilla
CVE-2019-8379 advancecomp: null pointer dereference in function be_uint32_read() in endianrw.h [fedora-all]↗2019-05-10
▶
CVE-2019-8379 — NULL Pointer Dereference in Advancecomp | cvebase